In the Claims : 

1. (Original) An electronic voting method comprising the step of using a fair blind 
signature scheme to obtain a digital signature (y§) of a data signal (xi) comprising a voter's vote 
(v/). 

2. (Original) The electronic voting method of claim 1, wherein the fair blind signature 
scheme is a threshold fair blind signature scheme in which the digital signature is obtained from 
a sub-set of a group of servers, the group of servers containing n servers and the sub-set 
containing t servers, where t < n. 

3. (Currently amended) The electronic voting method of claim 1 wherein the 
data signal (xi) corresponds to the voter's vote (v,) encrypted according to a first encryption 
scheme (E T m ), said first encryption scheme being the encryption scheme of a first mix-net (TM), 
and the method further comprises the step of applying the decryption scheme (Dtm ) inverse to 
said first encryption scheme to said data signal (xi) whereby to retrieve the voter's vote (v,). 

4. (Original) The electronic voting method of claim 3, and comprising the steps of: 
receiving, in a first order, a batch of encrypted data signals, each encrypted data signal 

(ci) comprising data encrypted according to a second encryption scheme (E M ) said data 
including a respective data signal (xi); 

retrieving each data signal (xi) from the respective encrypted data signal (c,- ) in said batch 
by applying a decryption scheme (Dm) inverse to said second encryption scheme (Em); and 
outputting the retrieved data signals (xi) for said batch in a different order from said first order. 
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5. (Original) The electronic voting method of claim 4, wherein said second encryption 
scheme is the encryption scheme of a second mix-net (M). 

6. (Original) The electronic voting method of claim 5, and comprising the step of 
detecting irregularities in the voting process, said step of detecting irregularities comprising 
verifying that the ballots to be counted do not contain duplicated data-pairs, wherein a data-pair 
corresponds to one of said data signals and the digital signature thereof. 

7. (Original) The electronic voting method of claim 5, and comprising the step of 
detecting irregularities in the voting process, wherein the step of detecting irregularities 
comprises checking the validity of the digital signatures in the ballots to be counted. 

8. (Original) The electronic voting method of claim 5, and comprising the step of 
detecting irregularities in the voting process, wherein the step of detecting irregularities 
comprises checking that there is no overlap between the ballots to be counted and entries in a 
revocation list 

9. (Currently amended) An electronic voting method according to claim L aay 
provious claim and comprising the steps of: 

receiving said data signal (jc,) for digital signature according to said fair blind signature 
scheme at a server module (AS), said data signal (jc # ) comprising a vote (v,) selected by a voter 
(V/), said vote (v,) being encrypted according to said first encryption scheme (E T m)> blinded 
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according to said fair blind signature scheme and digitally signed according to a digital signature 
scheme of said voter; 

verifying, by said server module (AS), that the digital signature (si) in the received signal 
is valid; 

in the case where the verifying step confirms that the digital signature in the signal 
received by said server module (AS) is valid, said server module (AS) digitally signs the blinded 
encrypted vote (<?/) and outputs the digitally-signed message (S A s(^/)); 

unblinding the digitally-signed message (S A s(^/)) to yield said digital signature (yi) of the 
data signal (xi); 

encrypting said data signal (xi) and said digital signature (yi) thereof according to said 
second encryption scheme (E M ) to produce encrypted data signal (c,-); and 

signing said encrypted data signal according to a signature scheme of the voter (Vj). 

10. (Original) An electronic voting system comprising: 
a plurality of voter modules (10), and 

an admin server module (20), 

wherein a voter module (10) and the admin server module (20) cooperate in application 
of a fair blind signature scheme whereby to obtain a digital signature (yi) of a data signal (jc,) 
comprising the respective voter's vote (v/). 

11. (Original) A voter module (10) adapted to cooperate with an admin server module 
(20) in application of a fair blind signature scheme whereby to obtain a digital signature (yi) of a 
data signal (xi) comprising the voter's vote (v/). 
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12. (Original) A computer program having a set of instructions which, when in use on 
computer apparatus, adapt said computer apparatus so as to constitute a voter module (10) 
according to claim 1 1 . 

13. (Original) A voting system admin server module (20) adapted to cooperate with a 
voter module (10) in application of a fair blind signature scheme whereby to obtain a digital 
signature (y§) of a data signal (xi) comprising the voter's vote (v,). 

14. (Original) A computer program having a set of instructions which, when in use on 
computer apparatus, adapt said computer apparatus so as to constitute a voting system admin 
server module (20) according to claim 13. 

15. (Original) A voting system randomizer module (40) comprising: 

input means for receiving a batch of cast votes, each cast vote comprising an encrypted data 
signal (a) comprising a respective voter's vote (v/) digitally signed according to a fair blind 
signature scheme, each encrypted data signal (c,) being encrypted according to a predetermined 
encryption scheme {E M )\ and 

a mix-net (M) for decrypting said encrypted data signals (cj) by applying a decryption 
scheme (D M ) inverse to said predetermined encryption scheme (E M )\ and 

output means for outputting the decrypted signals of said batch in an order different from the 
order of the corresponding encrypted data signals in said batch. 
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16. (Original) A computer program having a set of instructions which, when in use on 
computer apparatus, adapt said computer apparatus so as to constitute a voting system 
randomizer module (40) according to claim 15. 

17. (Original) A voting system tallier module (50) comprising: 

input means for receiving cast votes, each cast vote comprising a data signal (x,-) digitally 
signed according to a fair blind signature scheme, each data signal (x,-) comprising a respective 
voter's vote (v,) encrypted according to an encryption scheme (EtmY> and 

a mix-net (M) for decrypting said encrypted votes (v,) by applying a decryption scheme 
(D T m) inverse to said encryption scheme (Etm)- 

18. (Original) A computer program having a set of instructions which, when in use on 
computer apparatus, adapt said computer apparatus so as to constitute a voting system tallier 
module (50) according to claim 17. 



